Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.52K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.52K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Sat, 28 Oct 2023 02:25:11 GMT
———————————————
✏️Title: Developers — You’re Swaggering to Trouble: The Open Invitation Your API Docs Extend
———————————————
📎Link: https://medium.com/p/76acd9b7be6f
———————————————
Tags: #swagger #penetration_testing #swagger_ui #api_development #bounty_hunter

Developers — You’re Swaggering to Trouble: The Open Invitation Your API Docs Extend

In the digital realm, sharing is caring. But sometimes, over-sharing could lead to unforeseen trouble, especially when it comes to your…

17 views05:02

⤷ Title: apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 01:42:35 +0000
════════════════════════
⌗ Tags: #Web AppSec #APIDetector #Swagger endpoints

Penetration Testing Tools

apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains

26 views03:04

⤷ Title: OAuth and Swagger in Modern Web Applications
════════════════════════
𐀪 Author: Herbert Moroni Gois
════════════════════════
ⴵ Time: Thu, 06 Mar 2025 13:42:58 GMT
════════════════════════
⌗ Tags: #expressjs #oauth2 #firebaseauthentication #swagger #api_security

OAuth and Swagger in Modern Web Applications

Picture this: You’ve just built a robust API that provides valuable services and data. Your API works perfectly and passes all tests, but…

65 views14:05

⤷ Title: Hacking Swagger UI - 101
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 07:25:26 GMT
════════════════════════
⌗ Tags: #swagger_ui #bug_bounty #infosec #bug_bounty_tips #bug_bounty_writeup

Hacking Swagger UI - 101

A Hands-on practical guide to earning rewards.

35 views08:04

⤷ Title: Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
════════════════════════
𐀪 Author: tezp
════════════════════════
ⴵ Time: Thu, 08 May 2025 16:53:42 GMT
════════════════════════
⌗ Tags: #owasp #api #api_documentation #swagger #bug_bounty

Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps

“You can’t protect what you don’t know exists.” — A golden rule in cybersecurity, and the core reason shadow APIs are so dangerous.

12 views18:04

⤷ Title: Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları
════════════════════════
𐀪 Author: Onur Civan
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 11:51:10 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #swagger #hacking #git

Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları

Modern web uygulamarında geliştiricilerin hayatlarını kolaylaştırmak için geliştirilen bazı araçlar, yanlış konfigürasyon ve unutulan…

15 views12:04

⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 05:36:33 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty

Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties

जय श्री राम 🚩

18 views07:04

⤷ Title: We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API
════════════════════════
𐀪 Author: Serxan Hamzayev
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 08:40:39 GMT
════════════════════════
⌗ Tags: #api_security #swagger #spring_boot #java #backend_development

We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API

“We only use Swagger for development — it’s not dangerous.” That’s what we believed… until we discovered that Swagger was quietly…

65 views09:04

⤷ Title: How I Tricked a Swagger UI into Showing a Fake Login Page
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 06:44:48 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #swagger_ui #bug_bounty_tips #cybersecurity

How I Tricked a Swagger UI into Showing a Fake Login Page

Hey, bug hunters and tech nerds! So, I was recently digging into a web app for a bug bounty program, and I stumbled onto something wild…

26 views07:04

⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 04:10:45 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty

Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties

जय श्री राम 🚩

18 views05:04

⤷ Title: How Swagger UI Can Accidentally Expose Your API
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:22:20 GMT
════════════════════════
⌗ Tags: #swagger #api_security #cybersecurity #web_security #bug_bounty

How Swagger UI Can Accidentally Expose Your API

I’ve spent a considerable amount of time examining how APIs are built and documented. Again and again, one of the most common surprises I…

24 views16:04

⤷ Title: How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sat, 20 Dec 2025 14:41:41 GMT
════════════════════════
⌗ Tags: #swagger_ui #bugbounty_tips #bugbounty_writeup #cybersecurity #bug_bounty

🔍 How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)

Yesterday, we talked about what Swagger UI is — that clean little interface that shows all the API endpoints and lets you hit “Try it out”…

24 views16:04

⤷ Title: Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:55:25 GMT
════════════════════════
⌗ Tags: #api #hacking #bug_bounty_masterclass #hackerone #swagger

Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers

A Bug Bounty Masterclass Walkthrough

13 views08:04

⤷ Title: How to Hack Swagger UI Complete Guide.
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 15:04:11 GMT
════════════════════════
⌗ Tags: #swagger #bug_bounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty

How to Hack Swagger UI Complete Guide.

Earn rewards using this simple method.

25 views16:04

⤷ Title: How to Hack Swagger UI Complete Guide.
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 15:04:10 GMT
════════════════════════
⌗ Tags: #swagger #bug_bounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty

How to Hack Swagger UI Complete Guide.

Earn rewards using this simple method.

13 views16:04

⤷ Title: From Swagger to Shell: Turning a Misconfigured configUrl into a $400 RXSS Bounty
════════════════════════
𐀪 Author: dr34m14
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 12:05:32 GMT
════════════════════════
⌗ Tags: #swagger #hackerone #bug_bounty #bugbounty_writeup #xss_attack

From Swagger to Shell: Turning a Misconfigured configUrl into a $400 RXSS Bounty

A practical story of how automated recon, historical URL mining, and careful testing led to a Medium-severity Reflected XSS — responsibly…

57 views13:03

⤷ Title: Securing Swagger, Scalar, and Health Endpoints in ASP.NET
════════════════════════
𐀪 Author: Mahmood Alsarraj
════════════════════════
ⴵ Time: Sun, 10 May 2026 17:05:16 GMT
════════════════════════
⌗ Tags: #api_security #security #dotnet #aspnetcore #swagger

Securing Swagger, Scalar, and Health Endpoints in ASP.NET

🚨 Your API Might Be Secure… But Your Swagger UI Isn’t

31 views19:04